Download Online VALID 1z0-1085-22 Exam Dumps File Instantly[Nov 04, 2022]
1z0-1085-22 Exam Dumps For Certification Exam Preparation
Oracle 1z0-1085-22 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NEW QUESTION 34
Which three components are part of Oracle Cloud Infrastructure Identity and Access Management service?
- A. Virtual Cloud Networks
- B. Regional Subnets
- C. Users
- D. Policies
- E. Roles
- F. Dynamic Groups
- G. Compute Instances
Answer: C,D,F
Explanation:
IAM components are
RESOURCE
The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.
USER
An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials).
POLICY
A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.
GROUP
A collection of users who all need the same type of access to a particular set of resources or compartment.
DYNAMIC GROUP
A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.
NETWORK SOURCE
A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source.
COMPARTMENT
A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy.
TENANCY
The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create.
HOME REGION
The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.
FEDERATION
A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.
Reference:
https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/iam-components.html
NEW QUESTION 35
Which SLA type is not offered by Oracle Cloud Infrastructure compute service?
- A. Control Plane
- B. Performance Plane
- C. Service Plane
- D. Data Plane
Answer: C
Explanation:
Service Plane is NOT an SLA provided by OCI. See the table below:
NEW QUESTION 36
You are required to host several files in a location that can be publicly accessible from anywhere in the world. Which Oracle Cloud Infrastructure (OCI) service should you use?
- A. OCI File Storage
- B. Oracle Functions
- C. OCI Object Storage
- D. OCI Storage Gateway
- E. OCI Block Volume
Answer: C
NEW QUESTION 37
Which of the following is an example of an edge service in OCI?
- A. Oracle Data Guard
- B. OCI compute instances
- C. DNS Zone Management
- D. Virtual Machines
Answer: C
Explanation:
The Oracle Cloud Infrastructure Domain Name System (DNS) service lets you create and manage your DNS zones. You can create zones, add records to zones, and allow Oracle Cloud Infrastructure's edge network to handle your domain's DNS queries.
NEW QUESTION 38
A company has developed an eCommerce web application In Oracle Cloud Infrastructure.
What should they do to ensure that the application has the highest level of resilience?
- A. Deploy the application across multiple Availability Domains and subnet.
- B. Deploy the application across multiple Virtual Cloud Networks.
- C. Deploy the application across multiple Regions and Availability Domains.
- D. Deploy the application across multiple Availability Domains and Fault Domains.
Answer: C
Explanation:
For highest level of resilience you can deploy the application between regions and distribute on availability domain and fault domains.
Reference:
https://www.oracle.com/cloud/iaas/faq.html
NEW QUESTION 39
Which gateway can be used to provide internet access to an Oracle Cloud Infrastructure compute instance in a private subnet?
- A. NAT Gateway
- B. Dynamic Routing Gateway
- C. Service Gateway
- D. Internet Gateway
Answer: A
Explanation:
A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections.
NEW QUESTION 40
Which OCI service is the most cost-effective?
- A. Archive Storage
- B. File Storage
- C. Object Storage (standard)
- D. Block Volume
Answer: C
NEW QUESTION 41
A customer is looking to migrate their old database backups from their on-premises data center to Oracle Cloud Infrastructure (OCI). Which OCI service is the most cost-effective?
- A. Archive Storage
- B. File Storage
- C. Object Storage (standard)
- D. Block Volume
Answer: A
Explanation:
Archive storage is the most cost effective for archive data
Reference:
https://www.oracle.com/cloud/storage/archive-storage.html
Oracle Cloud Infrastructure offers two distinct storage class tiers to address the need for both performant, frequently accessed "hot" storage, and less frequently accessed "cold" storage. Storage tiers help you maximize performance where appropriate and minimize costs where possible.
1) Use Archive Storage for data to which you seldom or rarely access, but that must be retained and preserved for long periods of time. The cost efficiency of the Archive Storage offsets the long lead time required to access the data.
2) Use Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price to store data in the Object Storage. For more information, see Overview of Object Storage.
NEW QUESTION 42
What two statements regarding the Virtual Cloud Network (VCN) are true?
- A. A single VCN can contain both private and public Subnets.
- B. The VCN is the IPSec-based connection with a remote on premises location.
- C. You can only create one VCN per region.
- D. VCN is a regional resource that span across all the Availability Domains in a Region.
- E. VCN is a global resource that span across all the Regions
Answer: A,D
Explanation:
When you work with Oracle Cloud Infrastructure, one of the first steps is to set up a virtual cloud network (VCN) for your cloud resources.
VIRTUAL CLOUD NETWORK (VCN) :
A virtual, private network that you set up in Oracle data centers. It closely resembles a traditional network, with firewall rules and specific types of communication gateways that you can choose to use. A VCN resides in a single Oracle Cloud Infrastructure region and covers a single, contiguous IPv4 CIDR block of your choice. See Allowed VCN Size and Address Ranges. The terms virtual cloud network, VCN, and cloud network are used interchangeably in this documentation. For more information, see VCNs and Subnets.
SUBNETS :
Subdivisions you define in a VCN (for example, 10.0.0.0/24 and 10.0.1.0/24). Subnets contain virtual network interface cards (VNICs), which attach to instances. Each subnet consists of a contiguous range of IP addresses that do not overlap with other subnets in the VCN. You can designate a subnet to exist either in a single availability domainavailability domain or across an entire region (regional subnets are recommended). Subnets act as a unit of configuration within the VCN: All VNICs in a given subnet use the same route table, security lists, and DHCP options (see the definitions that follow). You can designate a subnet as either public or private when you create it. Private means VNICs in the subnet can't have public IP addresses. Public means VNICs in the subnet can have public IP addresses at your discretion. See Access to the Internet.
NEW QUESTION 43
You are analyzing your Oracle Cloud Infrastructure (OCI) usage with Cost Analysis tool in the OCI console.
Which of the following is NOT a default feature of the tool?
- A. Filter costs by applications
- B. Filter costs by tags
- C. Filter costs by date
- D. Filter costs by compartments
Answer: A
Explanation:
Cost Analysis is an easy-to-use visualization tool to help you track and optimize your Oracle Cloud Infrastructure spending, allows you to generate charts, and download accurate, reliable tabular reports of aggregated cost data on your Oracle Cloud Infrastructure consumption. Use the tool for spot checks of spending trends and for generating reports
NEW QUESTION 44
OCI budgets can be set on which two options?
- A. Cost-tracking tags
- B. Tenancy
- C. Compartments
- D. Free-form tags
- E. Virtual Cloud Network
Answer: A,C
Explanation:
In OCI a budget can be used to set soft limits on your Oracle Cloud Infrastructure spending. You can set alerts on your budget to let you know when you might exceed your budget, and you can view all of your budgets and spending from one single place in the Oracle Cloud Infrastructure console.
Budgets are set on
* Cost-tracking tags
* Compartments (including the root compartment)
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm
NEW QUESTION 45
According to Shared security model, which two are a customer's responsibilities in Oracle Cloud Infrastructure (OCI)?
- A. Customer data
- B. Physical security of OCI data center facilities
- C. Object Storage data durability
- D. Virtual Machine hypervisor
- E. Local NVMe data persistence
Answer: A,C
Explanation:
Customer and Oracle's responsibilities can be divided into the following areas:
Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offered in Oracle Cloud Infrastructure. This infrastructure consists of the hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services.
Identity and Access Management (IAM): As with all Oracle cloud services, you should protect your cloud access credentials and set up individual user accounts. You are responsible for managing and reviewing access for your own employee accounts and for all activities that occur under your tenancy. Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing.
Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises. This protection includes patching applications and operating systems, operating system configuration, and protection against malware and network attacks. Oracle is responsible for providing secure images that are hardened and have the latest patches. Also, Oracle makes it simple for you to bring the same third-party security solutions that you use today.
Data Classification and Compliance: You are responsible for correctly classifying and labeling your data and meeting any compliance obligations. Also, you are responsible for auditing your solutions to ensure that they meet your compliance obligations.
Host Infrastructure Security: You are responsible for securely configuring and managing your compute (virtual hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that devices are able to attach or mount the correct storage devices.
Network Security: You are responsible for securely configuring network elements such as virtual networking, load balancing, DNS, and gateways. Oracle is responsible for providing a secure network infrastructure.
Client and Endpoint Protection: Your enterprise uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services.
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm
NEW QUESTION 46
How is total network throughput allocated to a Virtual Machine (VM) Instance?
- A. Each VM is allocated 10 Gbps of network bandwidth regardless of the selected shape
- B. When launching a compute instance, customers may select the desired maximum network bandwidth
- C. Network bandwidth is variable
- D. Network bandwidth is proportional to the number of OCPUs in the Instance shape
Answer: D
Explanation:
A shape is a template that determines the number of CPUs, amount of memory, and other resources that are allocated to an instance.
The network bandwidth is directly proportional to the number of OCPUs in the instance shape!
NEW QUESTION 47
What do the terms OpEx and CapEx refer to?
- A. OpEx refers to Operational Example and CapEx refers to Capita Example
- B. OpEx refers to Operational Excellence and CapEx refers to Capital Excellence
- C. OpEx refers to Operational Expenditure and CapEx refers to Capital Expenditure
- D. OpEx refers to Operational Expansion and CapEx refers to Capital Expenses
Answer: C
Explanation:
CapEx is Capital expenditures comprise major purchases that will be used in the future.
OpEx Operating expenditures (expenses) represent day-to-day costs that are necessary to keep a business running.
NEW QUESTION 48
You run 5 Oracle Cloud Infrastructure (OCI) Virtual Machine instances on an OCI dedicated virtual host. How will this deployment be billed?
- A. The dedicated virtual machine host all 5 instances, and the boot volume of each instance will be billed
- B. The dedicated virtual machine host and the boot volumes of each instance will be billed
- C. All 5 instances will be billed on the basis of the number of OCPUs
- D. Only the dedicated virtual machine host will be billed
Answer: B
Explanation:
You must create a dedicated virtual machine host before you can place any instances on it. When creating the dedicated virtual machine host, you select an availability domain and fault domain to launch it in. All the VM instances that you place on the host will subsequently be created in this availability domain and fault domain. You also select a compartment when you create the dedicated virtual machine host, but you can move the host to a new compartment later without impacting any of the instances placed on it. You can also create the instances in a different compartment than the dedicated virtual machine host, or move them to difference compartments after they have been launched.
You are billed for the dedicated virtual machine host as soon as you create it, but you are not billed for any of the individual VM instances you place on it. You will still be billed for image licensing costs if they apply to the image you are using for the VM instances.
Read more: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Concepts/dedicatedvmhosts.htm
NEW QUESTION 49
You are setting up a proof of concept (POC) and need to quickly establish a secure between an on-premises data center and Oracle Cloud Infrastructure (OCI).
Which OCI service should you implement?
- A. VCN Peering
- B. IPSec VPN
- C. FastConnect
- D. Internet Gateway
Answer: B
Explanation:
You can set up a single IPSec VPN with a simple layout that you might use for a proof of concept (POC).
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/settingupIPsec.htm It is possible to set up a site-to-site Virtual Private Network (VPN) Connection between your on-premises network (a data center or corporate LAN) and your Oracle virtual cloud network (VCN) over a secure encrypted VPN. The VPN connection uses industry-standard IPSec protocols. The Oracle service that provides site-to-site connectivity is named VPN Connect (also referred to as an IPSec VPN).
NEW QUESTION 50
Oracle Cloud Infrastructure Budgets can be set on which two options?
- A. Cost-tracking tags
- B. Tenancy
- C. Compartments
- D. Free-form tags
- E. Virtual Cloud Network
Answer: A,C
Explanation:
A budget can be used to set soft limits on your Oracle Cloud Infrastructure spending. You can set alerts on your budget to let you know when you might exceed your budget, and you can view all of your budgets and spending from one single place in the Oracle Cloud Infrastructure console.
How Budgets Work:
Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children.
All budgets alerts are evaluated every 15 minutes. To see the last time a budget was evaluated, open the details for a budget. You will see fields that show the current spend, the forecast and the "Spent in period" field which shows you the time period over which the budget was evaluated. When a budget alert fires, the email recipients configured in the budget alert receive an email.
NEW QUESTION 51
What purpose does an Oracle Cloud Infrastructure (OCI) Dynamic Routing Gateway Serve?
- A. Enables OCI Compute instances to be reached from internet
- B. Enables OCI Compute instance to connect to on-promises environments
- C. Enables OCI Compute Instance to privately connect to OCI Object Storage
- D. Enable OCI Compute instances to connect to the internal
Answer: B
Explanation:
You can think of a Dynamic Routing Gateway (DRG) as a virtual router that provides a path for private traffic (that is, traffic that uses private IPv4 addresses) between your VCN and networks outside the VCN's region.
For example, if you use an IPSec VPN or Oracle Cloud Infrastructure FastConnect (or both) to connect your on-premises network to your VCN, that private IPv4 address traffic goes through a DRG that you create and attach to your VCN. For scenarios for using a DRG to connect a VCN to your on-premises network, see Networking Scenarios. For important details about routing to your on-premises network, see Routing Details for Connections to Your On-Premises Network.
Also, if you decide to peer your VCN with a VCN in another region, your VCN's DRG routes traffic to the other VCN over a private backbone that connects the regions (without traffic traversing the internet). For information about connecting VCNs in different regions, see Remote VCN Peering (Across Regions).
NEW QUESTION 52
......
Latest Verified & Correct 1z0-1085-22 Questions: https://gcgapremium.pass4leader.com/Oracle/1z0-1085-22-exam.html